IVANTI WARNS OF CONNECT SECURE ZERO-DAYS EXPLOITED IN ATTACKS

Summary from the TLDR InfoSec newsletter

Ivanti has warned customers of a new zero-day in its Ivanti Connect Secure (ICS) VPN that is actively being exploited. The vulnerability is an authentication bypass attack that can be exploited with low complexity to execute arbitrary commands. Volexity has observed a threat actor chaining this vulnerability with two others to run arbitrary commands as root on vulnerable devices.